Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa
File:                     3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa (raw, json)
Hash identifier:          xYZO8ZGhNc8pu62O/xQKTiRXUOi1NMpp2uNyNNL0xfQ=
Subject key identifier:   19:36:53:04:5F:D6:21:CE:7F:CC:81:77:15:73:E8:1E:C1:AF:AF:A6
Certificate issuer:       /CN=E629C4E7637A20BC21967E803440E0984DB741BE
Certificate serial:       4A6062C3F36E23C91224A8A6F95301FC91282384
Authority key identifier: E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa
Signing time:             Tue 05 Mar 2024 17:39:54 +0000
ROA not before:           Tue 05 Mar 2024 17:34:54 +0000
ROA not after:            Tue 04 Mar 2025 17:39:54 +0000
asID:                     263753
IP address blocks:        131.72.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:60:62:c3:f3:6e:23:c9:12:24:a8:a6:f9:53:01:fc:91:28:23:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E629C4E7637A20BC21967E803440E0984DB741BE
        Validity
            Not Before: Mar  5 17:34:54 2024 GMT
            Not After : Mar  4 17:39:54 2025 GMT
        Subject: CN=193653045FD621CE7FCC81771573E81EC1AFAFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:67:b6:ce:d2:3c:19:36:8c:67:a3:0d:9a:
                    f9:20:6c:cf:44:40:98:c3:9f:00:bf:b5:e4:43:04:
                    7a:39:33:ce:82:c3:ad:9c:e3:ae:8e:1f:5e:f7:d3:
                    26:30:fe:bf:25:19:a7:2b:9c:15:bd:2b:52:7b:d9:
                    39:22:e5:17:7b:f2:13:d9:50:27:f6:0e:5c:f8:7f:
                    87:bd:bc:d3:ae:8a:58:f6:57:49:99:e8:4d:8f:20:
                    58:69:19:2b:04:45:f1:fd:15:ce:a0:71:04:d4:07:
                    54:04:68:80:63:56:79:4f:c2:9a:75:b5:bc:6a:26:
                    6a:de:bc:d5:56:ca:67:cf:d7:88:8b:28:12:2b:ec:
                    e3:3f:ce:3f:23:c5:a7:83:ab:a3:ca:ea:5c:93:70:
                    4a:7c:3e:e7:c9:cd:40:32:da:73:3e:2c:98:f8:34:
                    fe:63:ad:16:c0:34:14:9d:29:5f:83:1d:4a:79:b4:
                    fa:a9:dc:c8:f8:06:f2:76:91:a2:b7:f2:b8:4d:bd:
                    c2:d1:90:ee:59:43:07:79:be:a9:84:7e:5b:c6:b1:
                    1b:b6:12:51:83:f9:c5:73:e3:5a:a6:42:c6:79:07:
                    1d:fb:a5:4f:c3:05:03:d4:f1:ba:cd:6c:94:03:30:
                    6c:37:d8:63:7a:e4:3e:fd:50:a6:3c:69:d4:12:62:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:53:04:5F:D6:21:CE:7F:CC:81:77:15:73:E8:1E:C1:AF:AF:A6
            X509v3 Authority Key Identifier:
                keyid:E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:7f:6e:80:d8:11:ab:01:95:e4:8b:86:41:2a:13:f6:25:
         84:18:b0:2a:f8:e5:a1:ba:c3:11:db:f6:25:70:22:09:ce:db:
         83:ea:7a:e2:3b:c6:84:b0:ab:0f:80:3f:1b:f4:64:17:71:b5:
         33:90:ba:3a:36:71:41:d9:2b:c9:66:8f:26:ed:1e:00:b6:72:
         df:d9:ee:90:7f:92:0c:fa:5b:46:6c:f0:02:56:77:e5:68:aa:
         2a:9a:9f:a5:e4:c0:6b:01:d4:7d:63:27:da:73:f0:58:00:d3:
         88:36:46:58:6e:9b:6a:9f:b4:4e:ca:db:b0:5c:3f:12:ee:e7:
         90:08:ef:29:c1:c1:75:45:1c:70:72:35:49:11:63:b4:ca:60:
         48:44:3e:4a:67:39:32:d2:1d:eb:de:59:99:c2:d1:9a:ec:dc:
         6e:2f:86:6e:a4:97:1f:e1:02:6e:20:c8:49:39:1d:d1:aa:e0:
         ab:1d:39:4d:86:50:e8:cf:f9:af:96:11:a3:88:a7:34:5c:39:
         2b:ee:3f:d1:0d:a9:2e:45:a0:04:a1:7d:39:3a:bb:a5:f1:ce:
         cb:32:58:da:14:77:1d:fe:04:fc:7e:c9:37:16:bc:41:ad:ab:
         70:15:b7:fc:ce:b0:be:13:16:93:df:3a:41:e1:bd:ed:e9:d7:
         fb:4f:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org